Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\auditsc.c Create Date:2022-07-28 11:27:02
Last Modify:2020-03-17 16:31:21 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:audit_in_mask

Proto:static int audit_in_mask(const struct audit_krule *rule, unsigned long val)

Type:int

Parameter:

TypeParameterName
const struct audit_krule *rule
unsigned longval
763  If val > 0xffffffff Then Return false
766  word = AUDIT_WORD(val)
767  If word >= AUDIT_BITMASK_SIZE Then Return false
770  bit = AUDIT_BIT(val)
772  Return mask[word] & bit
Caller
NameDescribe
audit_filter_syscallAt syscall entry and exit time, this filter is called if the* audit_state is not low enough that auditing cannot take place, but is* also not high enough that we already know we have to write an audit* record (i
audit_filter_inode_nameGiven an audit_name check the inode hash table to see if they match.* Called holding the rcu read lock to protect the use of audit_inode_hash